Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/0/34352e342e35362e302f32322d3234203d3e20323636303338.roa
File:                     34352e342e35362e302f32322d3234203d3e20323636303338.roa (raw, json)
Hash identifier:          9xQKeegs7K8edTBs2LIHBwG8Dd3hCAZX7gutuUiidbQ=
Subject key identifier:   DC:DD:21:88:BE:8B:B7:C5:5E:B0:5E:1E:D4:B3:B4:3D:0D:A0:4B:5E
Certificate issuer:       /CN=47DAF43636127D86720E3DEECA6F2C1B6E31B4D3
Certificate serial:       5A6D6CB2BC3B150312B47980B01BFA29B37045BE
Authority key identifier: 47:DA:F4:36:36:12:7D:86:72:0E:3D:EE:CA:6F:2C:1B:6E:31:B4:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47DAF43636127D86720E3DEECA6F2C1B6E31B4D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/0/34352e342e35362e302f32322d3234203d3e20323636303338.roa
Signing time:             Mon 13 Nov 2023 12:49:23 +0000
ROA not before:           Mon 13 Nov 2023 12:44:23 +0000
ROA not after:            Mon 11 Nov 2024 12:49:23 +0000
asID:                     266038
IP address blocks:        45.4.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6d:6c:b2:bc:3b:15:03:12:b4:79:80:b0:1b:fa:29:b3:70:45:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47DAF43636127D86720E3DEECA6F2C1B6E31B4D3
        Validity
            Not Before: Nov 13 12:44:23 2023 GMT
            Not After : Nov 11 12:49:23 2024 GMT
        Subject: CN=DCDD2188BE8BB7C55EB05E1ED4B3B43D0DA04B5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bb:cc:c1:bb:bf:cb:a2:be:87:ee:fc:46:99:
                    29:be:73:c3:bc:18:be:d4:27:ab:f3:e8:16:94:f8:
                    59:05:a1:bb:aa:94:cc:fc:20:51:3a:dc:5a:66:82:
                    37:e3:06:55:9f:23:f8:ec:74:5b:6b:65:99:bb:28:
                    c3:07:56:db:96:d0:45:c3:10:ff:ed:b9:15:ff:a7:
                    bc:70:ea:cb:8b:1d:d6:59:c3:25:3a:6f:20:3e:cc:
                    73:1d:a2:8a:3f:ea:ff:e7:3f:4a:e8:bf:03:96:f7:
                    2f:87:e1:8d:4f:d5:1e:8b:83:a3:9a:bf:ae:3e:9d:
                    4f:e8:86:7d:36:e1:a7:e8:ef:fb:22:8d:79:9e:25:
                    39:4f:5c:72:c0:fc:30:1c:ed:a5:02:44:82:55:0f:
                    7a:41:45:2d:b7:25:08:e4:6e:70:3b:09:c1:ea:86:
                    9a:2e:e2:50:56:dd:b9:df:59:0d:1e:4d:d3:91:7f:
                    d3:23:16:1c:8c:d1:a6:38:7d:53:67:06:c2:dd:0b:
                    cd:57:d0:c4:71:d8:80:61:21:ec:18:f1:e4:bf:c5:
                    df:4f:28:75:33:a7:8c:b7:bd:d4:57:43:91:13:b6:
                    25:2f:45:27:f6:00:e7:d6:ea:a3:cc:a8:3d:42:f6:
                    73:81:a1:88:1c:f1:ba:36:1d:2d:6d:ba:4a:4b:99:
                    36:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DD:21:88:BE:8B:B7:C5:5E:B0:5E:1E:D4:B3:B4:3D:0D:A0:4B:5E
            X509v3 Authority Key Identifier:
                keyid:47:DA:F4:36:36:12:7D:86:72:0E:3D:EE:CA:6F:2C:1B:6E:31:B4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/0/47DAF43636127D86720E3DEECA6F2C1B6E31B4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47DAF43636127D86720E3DEECA6F2C1B6E31B4D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/0/34352e342e35362e302f32322d3234203d3e20323636303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:1f:1e:6e:a4:6a:e5:25:32:fa:63:32:49:dc:e8:ba:12:64:
         46:62:26:46:3b:3a:7d:aa:85:06:ae:36:b1:58:8b:32:c6:5f:
         87:04:d2:bb:91:1e:36:bf:14:87:2e:f9:84:31:66:9f:b9:9a:
         71:21:dd:2b:34:68:00:8d:d0:ed:ad:30:a5:e6:4f:9c:20:f6:
         04:06:d6:6b:fe:2b:99:8e:62:b2:ca:8e:66:cb:9b:6e:69:c0:
         ce:5a:84:9b:be:cc:cb:da:5b:fc:9b:5a:54:35:18:32:c9:5e:
         4b:cd:9e:9d:7e:36:20:23:60:f4:24:fb:ad:45:91:2a:9c:90:
         42:4d:42:7d:46:c0:3b:97:74:1a:c8:23:a5:56:0a:bf:c0:9a:
         b7:04:c4:15:fc:20:b2:f7:05:96:c6:d6:b0:5b:32:d9:ef:21:
         5d:a1:7e:f0:3e:ac:98:41:7c:de:7a:88:92:db:b7:8e:f2:c2:
         50:bc:02:78:77:52:ed:21:8e:17:04:a9:9a:b1:4c:30:69:2c:
         d2:94:85:6a:02:d9:80:b9:07:6b:c8:e3:7c:45:6a:b7:14:fc:
         39:b6:f4:af:b5:ab:1f:93:11:d4:38:f4:3f:58:19:99:1f:89:
         59:43:f1:db:ea:9f:1b:0d:c1:7f:b5:78:c2:5a:24:e6:72:90:
         3e:69:29:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org